spatialml
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides users to install necessary development tools via 'uv' and 'npm'. The packages 'pyspatialml-pico' and '@picoxr/pico-cli' are consistent with the vendor's own infrastructure and are standard for this SDK.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface when reading third-party package metadata (model cards, READMEs) from the Pipeline Zoo. It mitigates this by instructing the agent to treat this data as untrusted evidence and to never execute commands or follow instructions found within it.
Audit Metadata